Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libexif may expose image data through exif_entry_get_value
published 4 days ago
Summary
The libexif library that processes photo metadata has a weakness in the exif_entry_get_value routine. It could let a crafted image cause the program to read unintended memory, leading to crashes or possible data leakage. Upgrade libexif to the newest release or apply the vendor's security patch as soon as possible.
What to do
- Update cleanstart libexif to version 0.6.21-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | libexif |
< 0.6.21-r0 Fix: upgrade to 0.6.21-r0
|
Original advisory text
exif_entry_get_value function in exif-entry
Security vulnerability affects the libexif package. The exif_entry_get_value function in exif-entry.
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-IN89107 · OSV
Track software like this
Free during beta